Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/C699D74AB64511EEB41BB633C4F9AE02.roa
File: C699D74AB64511EEB41BB633C4F9AE02.roa (raw, json)
Hash identifier: vZkkrfCzjUVvC81Go6LnrFdRUz+iwclWKWhtg9WtpPg=
Subject key identifier: 32:81:B1:2A:2D:2E:52:8D:47:9B:9A:28:39:00:00:32:18:19:22:44
Certificate issuer: /CN=A919495D/serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C
Certificate serial: 03B7
Authority key identifier: 27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/C699D74AB64511EEB41BB633C4F9AE02.roa
Signing time: Thu 18 Jan 2024 21:08:50 +0000
ROA not before: Thu 18 Jan 2024 21:08:50 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 55714
IP address blocks: 103.174.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jan 2024 11:39:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 951 (0x3b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919495D/serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C
Validity
Not Before: Jan 18 21:08:50 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65a99361-5617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:fa:01:5c:5c:c3:63:c9:3a:b8:8e:a3:4f:d7:
80:8e:0a:b4:81:ef:3a:e7:3e:67:27:a7:e8:39:46:
40:5e:03:f4:98:e4:e2:43:63:d3:bc:6d:bc:39:cc:
55:3c:06:1d:4b:75:6a:0d:28:6c:68:8a:e7:28:59:
a6:0c:af:2b:f6:30:cf:5b:82:d2:21:d7:93:3c:84:
36:81:f7:c0:18:15:e3:67:3d:1b:90:67:ce:64:09:
33:57:df:18:ef:4e:0b:b5:13:cd:ac:1b:71:35:9a:
f2:ac:b7:4f:66:48:49:f5:8e:6d:c0:59:9e:05:99:
4d:eb:66:2d:0e:a9:17:41:33:a4:6b:b8:43:f6:66:
4e:c8:b6:1d:2d:ca:f5:7c:3f:b7:6f:34:f5:f1:35:
f3:3b:0e:4f:3d:71:57:de:a8:31:85:7d:86:9f:bb:
3a:69:a2:fa:ba:35:91:1b:5b:eb:ce:1e:7f:61:0e:
14:39:52:a5:91:cc:27:d0:e7:de:67:0f:7e:d2:52:
14:96:4d:fa:1e:4c:cf:a7:90:9a:da:e8:a1:49:07:
23:86:78:0a:c2:42:19:43:6a:59:77:e7:9b:e4:89:
57:4b:da:fd:8f:5c:7d:b9:d2:91:66:d2:e0:c3:ac:
af:8c:22:96:13:d4:59:ba:e3:2c:3b:40:5b:49:91:
0e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:81:B1:2A:2D:2E:52:8D:47:9B:9A:28:39:00:00:32:18:19:22:44
X509v3 Authority Key Identifier:
keyid:27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/C699D74AB64511EEB41BB633C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.207.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:bf:0d:c2:d3:2d:6a:c8:4e:b2:cd:33:9f:78:9d:5e:f5:fb:
c2:ba:da:2d:03:82:3f:02:9f:9f:08:54:a1:62:95:0a:43:0d:
a2:28:91:0f:a5:b4:ba:83:e6:11:01:d6:96:28:e6:d4:bd:9e:
13:8b:4a:94:fb:9e:c0:78:d1:29:45:33:5b:a8:1b:e0:19:46:
ea:2c:14:36:32:75:92:78:35:54:dc:60:d9:db:19:75:af:b4:
f2:c8:fa:ac:1a:0b:93:79:d0:10:d3:c9:3f:67:74:83:c5:99:
8d:91:7a:1a:73:5a:27:22:27:6b:85:a4:4f:db:9e:0b:a9:e0:
b2:bb:ac:12:42:18:85:9d:23:a1:c0:e2:bc:46:aa:28:71:9c:
c9:71:95:04:68:ea:fc:e1:df:1d:33:63:3a:6d:d9:90:c1:c7:
a4:3c:d4:87:f2:76:7b:b3:4a:10:94:fb:5a:33:d8:14:e5:29:
55:12:30:41:74:4f:c1:fd:b5:79:b4:fb:53:19:e4:f8:b0:a5:
15:5e:0b:fe:ea:79:30:c9:8d:ec:99:7e:bd:ce:26:d3:f7:93:
70:31:16:0c:a3:65:b7:38:f3:fc:02:ea:9a:18:e5:a2:3f:36:
84:c3:8e:7b:37:5f:1f:7e:6e:1f:9b:87:d7:af:a5:ed:be:1e:
8a:17:7c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 28 14:06:56 2024 by rpki-client on console-fra.rpki-client.org